Dependency Hoisting Side Effects in JavaScript Monorepos
Phantom dependencies and version splits in monorepos hide failures until deployment reveals them.
Kwame Bauer
Section
Package Manager Mechanics
3 stories in Package Manager Mechanics.
Private Registry Configuration for npm and pnpm
Misconfigured private registries enable dependency confusion attacks on your supply chain.
Elise Cho
NPM Version Upgrade Paths on Linux and macOS
Understand which npm upgrade path fits your setup to avoid permissions errors and version drift.
Dana Kovac